Lucene search
K

210 matches found

NVD
NVD
added 2011/08/03 12:55 a.m.12 views

CVE-2011-2711

Cross-site scripting XSS vulnerability in the printfileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint...

3.5CVSS5.2AI score0.00371EPSS
Exploits0References14
Prion
Prion
added 2011/08/03 12:55 a.m.11 views

Cross site scripting

Cross-site scripting XSS vulnerability in the printfileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint...

3.5CVSS5.6AI score0.00371EPSS
Exploits0References14Affected Software1
Cvelist
Cvelist
added 2011/08/03 12:0 a.m.19 views

CVE-2011-2711

Cross-site scripting XSS vulnerability in the printfileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint...

5.1AI score0.00371EPSS
Exploits0References14
CVE
CVE
added 2011/08/03 12:0 a.m.54 views

CVE-2011-2711

CVE-2011-2711 affects cgit ≤0.9.0.2: XSS in print_fileinfo (ui-diff.c) allows remote authenticated users to inject script/HTML via the filename in a rename hint. Documented across multiple sources (SUSE/Fedora updates) indicating patches exist in cgit upgrades (e.g., OpenSUSE/SU-2011:0891-1, Fedo...

3.5CVSS5.2AI score0.00371EPSS
Exploits0References14Affected Software1
OpenVAS
OpenVAS
added 2011/03/24 12:0 a.m.19 views

Fedora Update for cgit FEDORA-2011-2803

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2011-2803 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

5CVSS0.1AI score0.05194EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/03/24 12:0 a.m.22 views

Fedora Update for cgit FEDORA-2011-2815

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2011-2815 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

7.5CVSS0.1AI score0.05194EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/03/24 12:0 a.m.18 views

Fedora Update for cgit FEDORA-2011-2803

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.05194EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/03/24 12:0 a.m.22 views

Fedora Update for cgit FEDORA-2011-2815

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.4AI score0.05194EPSS
Exploits1References2
NVD
NVD
added 2011/03/20 2:0 a.m.14 views

CVE-2011-1027

Off-by-one error in the convertqueryhexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service infinite loop via a string composed of a % percent character followed by invalid hex characters, as demonstrated by a %gg sequence...

5CVSS6.3AI score0.05194EPSS
Exploits1References13
Cvelist
Cvelist
added 2011/03/20 1:0 a.m.21 views

CVE-2011-1027

Off-by-one error in the convertqueryhexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service infinite loop via a string composed of a % percent character followed by invalid hex characters, as demonstrated by a %gg sequence...

6.2AI score0.05194EPSS
Exploits1References13
CVE
CVE
added 2011/03/20 1:0 a.m.52 views

CVE-2011-1027

CVE-2011-1027 : Off-by-one in the convert_query_hexchar function of html.c in cgit.cgi (cgit) before 0.8.3.5 can cause a denial of service (infinite loop) when processing a % followed by invalid hex characters (e.g., %gg). Connected advisories confirm the affected component and offer remediation ...

5CVSS6.3AI score0.05194EPSS
Exploits1References13Affected Software1
Positive Technologies
Positive Technologies
added 2011/03/20 12:0 a.m.2 views

PT-2011-2819 · Cgit · Cgit

Name of the Vulnerable Software and Affected Versions: cgit versions prior to 0.8.3.5 Description: The issue is caused by an off-by-one error in the convert query hexchar function in html.c in cgit.cgi. This allows remote attackers to cause a denial of service infinite loop via a string composed ...

5CVSS6.2AI score0.05194EPSS
Exploits1References16
Fedora
Fedora
added 2011/03/16 4:7 a.m.22 views

[SECURITY] Fedora 15 Update: cgit-0.9-1.fc15

Cgit is a fast web interface for git. It uses caching to increase performa nce...

5CVSS6.4AI score0.05194EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2011/03/16 12:0 a.m.27 views

Fedora 13 : cgit-0.9-1.fc13 (2011-2815)

In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...

5CVSS5.5AI score0.05194EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2011/03/16 12:0 a.m.19 views

Fedora 14 : cgit-0.9-1.fc14 (2011-2803)

In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...

5CVSS5.5AI score0.05194EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2011/03/16 12:0 a.m.21 views

Fedora 15 : cgit-0.9-1.fc15 (2011-2790)

In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...

5CVSS5.5AI score0.05194EPSS
Exploits1References4
Fedora
Fedora
added 2011/03/15 9:51 p.m.20 views

[SECURITY] Fedora 13 Update: cgit-0.9-1.fc13

Cgit is a fast web interface for git. It uses caching to increase performa nce...

7.5CVSS1.6AI score0.05194EPSS
Exploits1
Fedora
Fedora
added 2011/03/15 9:50 p.m.24 views

[SECURITY] Fedora 14 Update: cgit-0.9-1.fc14

Cgit is a fast web interface for git. It uses caching to increase performa nce...

5CVSS6.4AI score0.05194EPSS
Exploits1
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.17 views

Fedora Update for cgit FEDORA-2010-15387

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2010-15387 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

7.5CVSS0.3AI score0.0166EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.25 views

Fedora Update for cgit FEDORA-2010-15387

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.5AI score0.0166EPSS
Exploits0References2
Rows per page
Query Builder